High
CVE-2022-2431
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2022-2551
Duplicator – WordPress Migration Plugin <= 1.4.7 - Unauthenticated Backup Download
High
CVE-2022-2552
Duplicator – WordPress Migration Plugin <= 1.4.7 - Sensitive Information Disclosure
Medium
CVE-2022-35882
GS Testimonial Slider <= 1.9.6 - Authenticated (Author+) Stored Cross-Site Scripting
High
2030698f-1180-432b-9a66-3039fdda79fd
Booster for WooCommerce <= 5.6.1 - Cross-Site Request Forgery
High
CVE-2022-2388
WP Coder <= 2.5.2 - Cross-Site Request Forgery
Medium
CVE-2022-2377
Directorist – WordPress Business Directory Plugin with Classified Ads Listings <= 7.2.3 - Missing Authorization
Medium
CVE-2022-2382
Product Slider for WooCommerce <= 2.5.6 - Missing Authorization
Medium
CVE-2022-1932
Rezgo Online Booking <= 4.1.7 - Reflected Cross-Site-Scripting
High
cbb51383-1eab-4490-aa4c-bd1488312400
Trust Payments Gateway (3DS2) <= 1.2.2 - Cross-Site Request Forgery
High
CVE-2022-2540
Link Optimizer Lite <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting
High
c80e6f0b-ccca-4755-b64e-cfcebc5cc1fe
WP Sticky Button <= 1.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2022-36375
Tabs – Responsive Tabs with WooCommerce Product Tab Extension <= 3.6.0 - Authenticated (Admin+) Arbitrary Options Update
Medium
CVE-2022-1322
Coming Soon – Under Construction <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
6be64d8d-fc71-40c2-baa8-985445d953ea
SmartIdeo <= 2.7.0 - Stored Cross-Site Scripting
Medium
CVE-2022-0446
Simple Banner <= 2.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2022-2542
uContext for Clickbank <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
41d73ce6-a256-43ef-8627-c6f6d6635e3e
JobBoardWP – Job Board Listings and Submissions <= 1.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2022-1563
WPGraphQL WooCommerce <= 0.12.3 - Information Disclosure
Medium
35cc980b-9c52-4f0b-aeb2-4afa6efacd8f
WP ERP <=1.10.5 - Sensitive Data Exposure
High
32b3ad84-6adb-44c1-942a-51f27638c8c9
Multiple Roles < 1.3.7 - Privilege Escalation
Medium
CVE-2022-2532
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
17cb7420-b4e1-4959-beae-d3c0a8c4b1ff
VR Calendar <= 2.3.1 - Reflected Cross-Site Scripting
High
175d8dc0-fc12-464b-b651-50a060851eb2
Trust Payments Gateway (3DS2) <= 1.2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.